home

hacked mail1.exe

Project1

BKHN

Publisher:
BKHN

Product:
Project1

Version:
1.00

MD5:
4d57f9d2b9230b8b8a2352806357f6e2

SHA-1:
0bb505c6d820451d5f1c26887ff488d9dfbb06f0

SHA-256:
ba7ee5c191253b6f55cdd82905e86498cb89b899678d0f27b97d3edb835d9fd2

Scanner detections:
3 / 68

Status:
Clean  (3 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
11/5/2024 7:11:09 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.Packed
1.3.0.7383

Malwarebytes
HackTool.Agent.Gen
v2016.02.27.10

SUPERAntiSpyware
Trojan.Agent/Gen-BKHN
9297

File size:
160 KB (163,840 bytes)

Product version:
1.00

Original file name:
hacked mail1.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\programs\hacked mail1.exe

File PE Metadata
Compilation timestamp:
2/15/2011 10:53:15 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:NCFjkKNvTIARXSjrL9YO8bLkJFUA8XlhwR2XHU2qTjKMswzfww9PBsE:sLLIARSjFYO8bAJWAScRu1qnKM5fwmPB

Entry address:
0x121C

Entry point:
68, 08, 2E, 42, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, F7, EA, 41, B4, 36, BC, 90, 45, A3, 20, 54, E2, FC, 68, 2D, 47, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 22, C5, 8F, 52, B0, D8, 50, 72, 6F, 6A, 65, 63, 74, 31, 00, D9, 94, 2F, 87, 0F, 88, 87, 00, 00, 00, 00, FF, CC, 31, 00, 12, 5A, B1, 5C, 55, BB, C9, 6D, 49, BD, 8F, DA, 92, F3, A6, 10, 1D, 3C, F4, 35, B6, 9A, A5, A2, 48, 9D, B4, 19, 59, 1F, BE, 6E, 59, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
7.5016

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
148 KB (151,552 bytes)

The file hacked mail1.exe has been seen being distributed by the following URL.

http://dc337.4shared.com/download/.../hacked_mail1.exe

Scan hacked mail1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.